UTM VOIP Messages

UTM VOIP Messages

Base Rule

General VOIP Message

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

level

<severity>

Text/String

The ID (logid) is a 10-digit field. It is a unique identifier for that specific log.

logid

<vmid>

Number

Each log entry contains a Level (level) field that indicates the estimated severity of the event that caused the log entry.

srcip

<sip>

IP Address

IP address of the traffic’s origin

dstip

<dip>

IP Address

Destination IP address for the web.

src_port

<sport>

Number

Port number of the traffic's origin.

dst_port

<dport>

Number

Port number of the traffic's destination.

src_int

<sinterface>

Text/String

Interface name of the traffic's origin.

dst_int

<dinterface>

Text/String

Interface of the traffic's destination.

proto

<protnum>

Number

The protocol used by web traffic (tcp by default).

vd

<domainorigin>

Text/String

N/A

type

<subject>

Text/String

N/A

action

<command>

Text/String

N/A